Analysis
-
max time kernel
185s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 06:57
Static task
static1
Behavioral task
behavioral1
Sample
db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe
Resource
win10v2004-20221111-en
General
-
Target
db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe
-
Size
1.2MB
-
MD5
3e6c599d00576b448072902fb48bd8cf
-
SHA1
87b9d54c4a6992665d59d545f35da54281359be5
-
SHA256
db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f
-
SHA512
d27c8450e58d275f2ee3dfd2f19256f7895c5581ef690f4db02aa51c6a47a0b2877238b57900fdae0b10133cf82bad8730781bdfc08720fd0178ee825f976aee
-
SSDEEP
24576:GE1YV7Ua+wGgharPwGOoZQg64ttgFPExrC+gXMza:GE1YVYhw5aT3I4ttVc+g82
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3804 db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\oledsp32.dl_ db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe File created C:\Windows\SysWOW64\oledsp32.dll db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3804 db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe 3804 db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe 3804 db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe"C:\Users\Admin\AppData\Local\Temp\db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:3804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26KB
MD56db0debfb98119305df3801c4c2555e3
SHA103b6267361a197c2ee29af483bca73d15192c915
SHA256dcc50a77ef007040e97cf8001a743a7909db19be6b32af28feaa68d775fe2c4f
SHA5125a85de074db1a8bd32aba1a4b6837e2f7bee9ac7734331e77f02289a8b2c3bfde91734cdc525125d3c6800329e9a5f07b56f9d1dd8074b6df49684c90a181fb3